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DETAILED ACTION 

This action is in response to tine papers filed 4/15/2008. 

Response to arguments 

Applicant's arguments with respect to the claim have been considered but are 
moot in view of the new ground(s) of rejection. 

Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the phor art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

Claims 1 , 3, 4, 7, 8, 1 0, 1 2, 1 8, 1 9, 24, 25 and 28 are rejected under 35 U.S.C. 
103(a) as being unpatentable over Kinnis (WO 01/13574) in view of Sarfati et al (US 
2004/0015316). With respect to claims 1 and 24, a method for validating a message 
with a signature, wherein said method comprises: receiving said message with said 
signature (see page 15 lines 19-24 i.e. The digital signature service receives the 
signature file. The certificate, document and signature are extracted from the signature 
file.); and carrying out an integrated validation and storing process, wherein said 
signature is validated based on a validation algorithm (see page 16 line 1 1 - page 17 
line 9 i.e. message digest) and a key (see page 16 line 1 1 - page 17 line 9 i.e. 
certificate's public key) and said received message is stored in a database (see page 15 
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lines 8-15 i.e. if the document is verified through the digital signature, the document and 
the signature are stored in a persistent data store such as data store 700). 

Kinnis does not teach where said message and validating said signature within 
one atomic process prevents possible modification of the message between validation 
and storage. Sarfati teaches where said message and validating said signature within 
one atomic process prevents possible modification of the message between validation 
and storage (paragraph 0159). It would have been obvious at the time the invention was 
made to a person having ordinary skill in the art to which said subject matter pertains to 
have prevented the modification of application between receiving and storing to make 
sure the code have not been tampered with (paragraph 0159). Therefore one would 
have been motivated to have prevented the modification of the message between 
receiving and storing. 

With respect to claims 3 and 25, wherein the storing process is rolled back, if the 
signature is not valid (see page 15 lines 8-15 i.e. if the document is verified through the 
digital signature, the document and the signature are stored in a persistent data store 
such as data store 700). 

With respect to claim 4, wherein the storing process is completed, if the signature 
is valid (see page 15 lines 8-15 i.e. if the document is verified through the digital 
signature, the document and the signature are stored in a persistent data store such as 
data store 700). 
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With respect to claim 7, wlierein the integrated validation and storing process is 
carried out by said database (see figure 1 element 100 Digital Signature Service and 
page 15 line 7 - page 17 line 9). 

With respect to claim 8, wherein the integrated validation and storing process is 
controlled by said database (see figure 1 element 100 Digital Signature Service and 
page 15 line 7 - page 17 line 9). 

With respect to claim 10, wherein said signature is a digital signature (see page 
15 line 7 -page 17 line 9). 

With respect to claims 12 and 28, a method for generating a signature for a 
message, wherein said method comprises: carrying out an integrated receiving and 
generating process, wherein said message to be sent is received and said signature is 
generated based on a signing algorithm (see page 12 line 23 - page 15 line 5 i.e. 
message digest) and a key (see page 12 line 23- page 15 line 5), and sending said 
message with said signature (see figure 5 and page 15 lines 3-5 i.e. once the signature 
file has been created the user of the digital signature service may use any means 
available to send a file to a recipient). Kinnis does not teach where said message and 
validating said signature within one atomic process prevents possible modification of the 
message between validation and storage. Sarfati teaches where said message and 
validating said signature within one atomic process prevents possible modification of the 
message between validation and storage (paragraph 0159). It would have been obvious 
at the time the invention was made to a person having ordinary skill in the art to which 
said subject matter pertains to have prevented the modification of application between 
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receiving and storing to make sure the code have not been tampered with. Therefore 
one would have been motivated to have prevented the modification of the message 
between receiving and storing. 

With respect to claim 18, wherein said integrated receiving and generation 
process is carried out In a database (see figure 1 element 100 Digital Signature Service 
and page 15 line 7 - page 17 line 9), where said message to be sent Is stored (see 
page 15 lines 8-15 i.e. if the document is verified through the digital signature, the 
document and the signature are stored in a persistent data store such as data store 
700). 

With respect to claim 19, wherein said signature is a digital signature (see page 
15 line 7 -page 17 line 9). 

With respect to claim 22, An apparatus for validating a message with a signature, 
wherein said apparatus comprises: a first means for receiving said message with said 
signature (see page 15 lines 19-24 i.e. The digital signature service receives the 
signature file. The certificate, document and signature are extracted from the signature 
file.); and a second means for carrying out an integrated validation and storing process, 
wherein said second means are capable and affected to validate said signature based 
on a validation algorithm (see page 16 line 1 1 - page 17 line 9 I.e. message digest) and 
a key (see page 16 line 1 1 - page 17 line 9 i.e. certificate's public key) and to store said 
message (see page 15 lines 8-15 i.e. if the document is verified through the digital 
signature, the document and the signature are stored in a persistent data store such as 
data store 700). Kinnis does not teach where said message and validating said 
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signature within one atomic process prevents possible modification of the message 
between validation and storage. Sarfati teaches where said message and validating 
said signature within one atomic process prevents possible modification of the message 
between validation and storage (paragraph 0159). It would have been obvious at the 
time the invention was made to a person having ordinary skill in the art to which said 
subject matter pertains to have prevented the modification of application between 
receiving and storing to make sure the code have not been tampered with. Therefore 
one would have been motivated to have prevented the modification of the message 
between receiving and storing. 

With respect to claim 23, An apparatus for generating a signature for a message, 
wherein said apparatus comprises: means for carrying out an integrated receiving and 
generating process, wherein said means are capable and affected to receive said 
message to be sent and to generate said signature based on a signing algorithm (see 
page 12 line 23 - page 15 line 5 i.e. message digest) and a key (see page 12 line 23 - 
page 15 line 5); and means for sending said message with said signature (see figure 5 
and page 15 lines 3-5 i.e. once the signature file has been created the user of the digital 
signature service may use any means available to send a file to a recipient). Kinnis 
does not teach where said message and validating said signature within one atomic 
process prevents possible modification of the message between validation and storage. 
Sarfati teaches where said message and validating said signature within one atomic 
process prevents possible modification of the message between validation and storage 
(paragraph 0159). It would have been obvious at the time the invention was made to a 
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person having ordinary skill in the art to which said subject matter pertains to have 
prevented the modification of application between receiving and storing to make sure 
the code have not been tampered with. Therefore one would have been motivated to 
have prevented the modification of the message between receiving and storing. 

Claims 5, 6, 11, 14, 15, 17, 20, 21, 26, 27 and 29-30 are rejected under 35 
U.S.C. 103(a) as being unpatentable over Kinnis (WO 01/13574) in view of Sarfati et al 
(US 2004/0015316) in view of Slaughter (U.S. 6,643,650). Kinnis and Sarfati teach 
everything with respect to claim 1 above but does not teach with respect to claims 5, 26 
and 29 wherein said received message is locked before the integrated validation and 
storing process is carried out and released after the integrated validation and storing 
process has been finished. Slaughter teach using a ACID transaction wherein said 
received message is locked before the integrated validation and storing process is 
carried out and released after the integrated validation and storing process has been 
finished (see Slaughter column 45 line 63 - column 46 line 12). It would have been 
obvious at the time the invention was made to a person having ordinary skill in the art to 
which said subject matter pertains to have used ACID since in the event of a failure, all 
operations and procedures should be undone, and all data should rollback to its 
previous state (see Slaughter column 45 line 63 - column 46 line 12). Therefore one 
would have been motivated to have ACID to decrease the effects of failure on the 
system. 
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With respect to claims 6, 27 and 30 wherein said received signature is locked 
before the integrated validation and storing process is carried out and released after the 
integrated validation and storing process has been finished (see Slaughter column 45 
line 63 - column 46 line 12). 

With respect to claim 11, wherein said integrated validation and storing process 
is carried out as an ACID transaction. Slaughter teaches wherein said integrated 
validation and storing process is carried out as an ACID transaction (see Slaughter 
column 45 line 63 - column 46 line 12). It would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject 
matter pertains to have used ACID since in the event of a failure, all operations and 
procedures should be undone, and all data should rollback to its previous state (see 
Slaughter column 45 line 63 - column 46 line 12). Therefore one would have been 
motivated to have ACID to decrease the effects of failure on the system. 

With respect to claim 14, wherein said message to be sent is locked before the 
integrated receiving and generating process is carried out and released after the 
integrated receiving and generating process has been finished (see Slaughter column 
45 line 63 - column 46 line 12). 

With respect to claim 15, wherein said key to be used for generating the 
signature is locked before the integrated receiving and generating process is carried out 
and released after the integrated receiving and generating process has been finished 
(see Slaughter column 45 line 63 - column 46 line 12). 
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With respect to claim 17, wherein said integrated receiving and generating 
process is carried out as an ACID transaction (see Slaughter column 45 line 63 - 
column 46 line 12). 

With respect to claim 20, Kinnis teaches the method for validating a message 
with a signature, wherein said method comprises: receiving said message with said 
signature (see page 15 lines 19-24 i.e. The digital signature service receives the 
signature file. The certificate, document and signature are extracted from the signature 
file.); sending a request to a security device (page 12 line 23 - page 13 line 3); 
validating said signature in said security device (see figure 7 digital signature service 
and page 15 lines 16-24 i.e. the digital signature service verifies that the signature is 
from a trusted certificate authority); and storing of said message in response to the 
result of the validation (see page 15 lines 8-15 i.e. if the document is verified through 
the digital signature, the document and the signature are stored in a persistent data 
store such as data store 700). Kinnis does not teach starting an ACID transaction and 
committing said ACID transaction (see Slaughter column 45 line 63 - column 46 line 
12). Slaughter teaches starting an ACID transaction and committing said ACID 
transaction (see Slaughter column 45 line 63 - column 46 line 12). It would have been 
obvious at the time the invention was made to a person having ordinary skill in the art to 
which said subject matter pertains to have used ACID since in the event of a failure, all 
operations and procedures should be undone, and all data should rollback to its 
previous state (see Slaughter column 45 line 63 - column 46 line 12). Therefore one 
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would have been motivated to have ACID to decrease the effects of failure on the 
system. 

With respect to claim 21 , Kinnis teaches the method for generating a signature 
for a message, wherein said method comprises: acquiring said message to be signed 
(page 12 line 23 - page 13 line 3); sending a request to a security device (see figure 5 
digital signature service and page 12 line 23 - page 13 line 3); generating said 
signature for said message in said security device (see page 12 line 23 - page 15 line 
5); and sending said message with said signature (see figure 5 and page 15 lines 3-5 
i.e. once the signature file has been created the user of the digital signature service may 
use any means available to send a file to a recipient). Kinnis does not teach starting an 
ACID transaction and committing said ACID transaction (see Slaughter column 45 line 
63 - column 46 line 12). Slaughter teaches starting an ACID transaction and committing 
said ACID transaction (see Slaughter column 45 line 63 - column 46 line 12). It would 
have been obvious at the time the invention was made to a person having ordinary skill 
in the art to which said subject matter pertains to have used ACID since in the event of 
a failure, all operations and procedures should be undone, and all data should rollback 
to its previous state (see Slaughter column 45 line 63 - column 46 line 12). Therefore 
one would have been motivated to have ACID to decrease the effects of failure on the 
system. 

Claims 9 and 16 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Kinnis (WO 01/13574) in view of Sarfati et al (US 2004/0015316) in view of Dickinson et 
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al (U.S. 6,853,988). Kinnis and Sarfati teach everything with respect to claim 1 above 
but does not teach with respect to claim 9, wherein said message is an XML-document. 
Dickinson teach wherein said message is an XML-document (see Dickinson column 27 
lines 16-25). It would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains to have wherein said 
message is an XML-document since XML documents advantageously allow designers 
to create their own customized document tags, enabling the definition, transmission, 
validation, and interpretation of data between applications and between organizations 
(see column 9 lines 38-61). Therefore one would have been motivated to have ACID to 
decrease the effects of failure on the system. 

With respect to claim 16, wherein said message is an XML-document (see 
Dickinson column 27 lines 16-25). 

Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Devin Almeida whose telephone number is 571-270-1018. The 
examiner can normally be reached on Monday- Thursday from 7:30 A.M. to 5:00 P.M. The 

examiner can also be reached on alternate Fridays from 7:30 A.M. to 4:00 P.M. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Gilberto Barron, can be reached on 571-272-3799. The fax phone number 
for the organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 

Devin Almeida 
Patent Examiner 
6/30/2008 



/Benjamin E Lanier/ 

Primary Examiner, Art Unit 2132 



